Security Incidents mailing list archives
Re: yes, its t0rn again
From: Helmut Springer <delta () FAVEVE UNI-STUTTGART DE>
Date: Thu, 4 Jan 2001 14:29:26 +0100
On Wed 2001-01-03 (15:51), Andreas Hasenack wrote:
That may also not be enough. A library could have been hacked, md5sum should be statically linked. And, if a kernel module has been inserted, then all bets are off, you would have to reboot from a known kernel to be sure.
if you're playing rough you won't have modules support in the kernel (as long as you can't make sure modules can't be tampered) and a read only boot media checking the system from a read only core system on startup. yes, that somewhat makes system maintenance a pain. the price to pay. -- MfG/best regards, helmut springer Die andern schon scheintot, Du springst aufs Podest... Du bist besser dran, Brille, besser, viel besser als der Rest.
Current thread:
- yes, its t0rn again johnathan curst (Jan 01)
- Re: yes, its t0rn again Michael Damm (Jan 01)
- Re: yes, its t0rn again Joe Stewart (Jan 02)
- Message not available
- Re: yes, its t0rn again MadHat (Jan 02)
- Re: yes, its t0rn again Jonas Luster (Jan 02)
- Re: yes, its t0rn again MadHat (Jan 02)
- Re: yes, its t0rn again Michael Damm (Jan 01)
- Re: yes, its t0rn again Andrew Edelstein (Jan 03)
- Re: yes, its t0rn again Andreas Hasenack (Jan 03)
- Re: yes, its t0rn again Helmut Springer (Jan 04)
- Re: yes, its t0rn again Aaron (Jan 06)
- Re: yes, its t0rn again Helmut Springer (Jan 06)
- LKM insecurity Greg A. Woods (Jan 06)
- Re: yes, its t0rn again Andreas Hasenack (Jan 03)
- <Possible follow-ups>
- Re: yes, its t0rn again Robert Horn (Jan 04)
- Re: yes, its t0rn again Jeff Bachtel (Jan 04)
- Attack Signature Reprodution Alexandre Soares (Jan 06)
- Re: yes, its t0rn again Jeremy 'Circ' Charles (Jan 06)
- bootable readonly media in your pocket Re: yes, its t0rn again marc (Jan 05)
- Re: bootable readonly media in your pocket Re: yes, its t0rn again Michael H. Warfield (Jan 05)
- Re: bootable readonly media in your pocket Re: yes, its t0rn again Jeff (Jan 05)
- Re: yes, its t0rn again Jeff Bachtel (Jan 04)